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On Tate-Shafarevich Groups of some 
Elliptic Curves 
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Abstract. Generalizing results of Stroeker and Top we show that the 2-ranks of the Tate- 
Shafarevich groups of the elliptic curves y 2 = (x + k)(x 2 + k 2 ) can become arbitrarily 
large. We also present a conjecture on the rank of the Selmer groups attached to rational 
2-isogenies of elliptic curves. 
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1. Introduction 



In order to introduce the relevant notation, we start by reviewing the well known 
first descent on elliptic curves by rational 2-isogenies (see e.g. [2, 7, 14]). Such 
isogenies of an elliptic curve E defined over Q exist if and only if E has a rational 
point of order 2, and by a suitable choice of the coordinate system we may assume 
that E has a Weierstrafi model of the form E : y 2 = x(x 2 + ax + b) with a, b € Z. 
The presence of a torsion point T = (0, 0) of order 2 guarantees the existence of a 
rational 2-isogeny <p : E — > E onto E : y 2 — x(x 2 +ax + b), where a — —2a and 
b = a 2 — 46. There is a dual isogeny i/j : E — ► E such that ip o <fi = [2]e, where 
[2]e denotes the multiplication by 2 on E; similarly, (f> o ip is multiplication by 2 
on E. 

Weil [16] studied the map a defined by a(P) = xQ x2 for all points P = 
(x,y) G E(Q) different from O and T, and showed that a becomes a homomor- 
phism E(Q) — > Q x /Q x2 by putting a(0) = Q x2 and a(T) = bQ x2 . The kernel 
of a coincides with the image of the 2-isogeny ip introduced above. In other words, 
we have the exact sequence 



► ip(E(Q)) ► E(Q) — 

as well as the corresponding result for the dual isogeny: 



► <P(E(Q)) ► E(Q) Q x /Q 
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Moreover Tate showed that the Z-rank r of the Mordell-Weil groups E(Q) and 
E(Q) is given by 

2 r+2 = #ima-#im/3. (1) 

The images of a and (3 can be described explicitly as follows: W(E/Q) := ima 
(note that ima ~ E(Q)/ip(E(Q)) consists of all classes 6iQ x2 , where b\ is a 
squarefree integer with 6162 = b, such that 

N 2 — biM 4 + aM 2 e 2 + b 2 e 4 (2) 

has a nontrivial 1 primitive 2 solution in integers N,M,e G N. The equation (2) is 
called a torsor of E/Q and will be denoted by T^(b\); note that these torsors 
depend on the 2-isogeny ip : E — ► E: elliptic curves with three rational points of 
order 2 have three 2-isogenies. It is easy to see that every rational point P 7^ O 
on E has the form P = (m/e 2 ,n/e 3 ) for integers n,m, e <G Z such that (to, e) = 
(n, e) = 1, and we have a(P) = toQ x2 by definition; moreover, it can be shown 
that the corresponding torsor (to) is solvable. Conversely, if (N, M, e) is a 
nontrivial primitive solution of T^(bi), then (biM 2 /e 2 ,b 1 MN/e 3 ) is a rational 
point on E, and the group structure on the torsors of W(E/Q) is induced by the 
addition law on the elliptic curve: pick two rational points on E corresponding 
to rational solutions on the torsors T^\f3\) and TW(/?2), add the points on 
E, and map this sum to the corresponding torsor; it turns out that this torsor 
is T^\Ps), /?3 being the square free kernel of flifo] thus the multiplication on 
the set of torsors coincides with the multiplication in Q x /Q x2 . We also remark 
that rational solutions of T^\b\) can be made integral and primitive by clearing 
denominators etc. 

Similarly, W(E/Q) := im/3 consists of all classes &iQ x2 , &i squarefree, with 
&1&2 = b = a 2 — 46 such that the torsor 

T w (h) :N 2 = b 1 M 4 - 2aM 2 e 2 + b 2 e 4 (3) 

has a nontrivial primitive integral solution. 

The classes &i<Q x2 such that (3) has solutions in every Q p (including M = Qoc) 
form a subgroup SW(E/Q) of Q x /Q x2 (called the 0-part of Selmer group of E) 
that contains W(E/Q) as a subgroup. The corresponding factor group is called a 
Tate-Shafarevich group; thus we have, by definition, the exact sequences 

► W(E/Q) ► SW(E/Q) > TS1(E/Q)[4>] ► 0, 

^ ( 4 ) 
> W(E/Q) ► SW(E/Q) > UI(E/Q)[ip] > 0. 

Sclmcr and Tate-Shafarevich groups can be defined for any isogeny of elliptic 
curves; moreover it can be shown that UI(E/Q)[4>] injects into UI(E/Q)[2] (see the 
diagram in Section 5 below). It is known that there are Tate-Shafarevich groups 
with arbitrarily large cardinality: Cassels [4] used the pairing on UI(i?/Q)[3] for 
showing that there are elliptic curves E defined over Q such that the 3-rank of 



1 That is, N = M = e = is excluded. 

2 This is our abbreviation for (N, e) = (M, e) = 1. 
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HI(-E/Q)[3] is arbitrarily large; a similar method was used by McGuinness [12] 
to prove the same for III(i?/Q)[2]. Boiling [3] and Kramer [8] also showed that 
III(i?/Q)[2] can be arbitrarily large. In all these constructions, reciprocity plays 
an important role; on the other hand, these authors also make use of heavier 
machinery such as the Cassels pairing on III. In this paper we want to show that 
large III can be found with reciprocity alone. This is accomplished by factoring 
the torsors (2) and (3) over the quadratic number fields Q(E[2]) and Q(E[2]), 
respectively: multiplying the torsor T^\b\) in (2) by b\ we get, for example, 

6i7V 2 = (6iM+iae 2 ) 2 -i(a 2 -46)e 4 , (5) 

and the right hand side splits over Q(Va 2 — Ab) = Q(E[2]). The idea is then to 
use the arithmetic of Q(£?[2]) to deduce necessary conditions for the existence of 
a rational point on T^\b\). 

Remark. The torsor (5) splits not only over Q(E[2]); writing it in the form 
\(a 2 - Ab)e 4 = (b x M + \ae 2 ) 2 - biN 2 shows that it also splits over Q(Vh). 

In this paper, we study the elliptic curve y 2 = (x+k)(x 2 +k 2 ) for integers k ^ 0. 
In fact, we will work with the model Ek : y 2 = x(x 2 — 2kx + 2k 2 ) throughout this 
paper. The curve Ek : y 2 = x(x 2 + Akx — Ak 2 ) is the 2-isogenous curve of E. Both 
Ek and Ek have conductor TV = 2 7 k 2 , and their torsion groups have order 2 (see 
[13], but observe that one still has to check that the 3-torsion is trivial), the points 
of order 2 being T = (0, 0) and T = (0, 0), respectively Note that a(T) = 2Q x2 
and (3(f) = -Q x2 , so W(E k /Q) and W(E k /Q) always have even cardinality. Also 
the fact that the fields Q(E k [2]) = Q(i) and Q(E k [2]) = Q(V2) have class number 
1 keeps things simple. Finally we observe that the same technique can be used to 
construct families of non-congruent numbers (see [11]). 



2. Quadratic Residue Symbols 

Let Ok be the ring of integers of a number field k; for prime ideals p of Ok and 
integers a £ Ok\p with odd norm, define the quadratic residue symbol [a/p] = ±1 
by demanding that [a/p] = a^P -1 )/ 2 mod p. For k = Q, this is the usual Legendre 
symbol (•/')• F° r quadratic number fields it follows directly from the definition 
that [a/p] — (Na/p) for any rational prime p, and that [a/p] = (a/p) whenever 
seZ, where p is a prime ideal in k of degree 1 with norm p. For quadratic residues 
a = x 2 mod p of primes p = 1 mod 4, the biquadratic symbol (a/p) 4 is defined by 
[a/p) 1 = (x/p). 

Lemma 1. Let k be a squarefree product of primes pj = 1 mod 8 with (pi/pj) = 
+1 for i 7^ j, and let tTj ■ = e + f\[2 be an element of norm pj in Z[\/2]. If k\ is 
a product of pj and k\ — KiKi for some K\ € Z[\/2], then [kx/tt] does not depend 
on the choice of the ttj, 1 < j < r. 
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Proof. It is clearly sufficient to show that [X/tt] — [X/tt], where A = 7Tj and tt = ttj 
with i ^ j, and where A is the conjugate of A. But this follows immediately from 
[XX/tt] = [1/tt] = (l/p) = +1. □ 

Lemma 2. Let k = Q(V~^T) and let a be a prime in O fc with norm aW = p = 
1 mod 8. Then [a /a] = 1. 

Proof. This is a consequence of the quadratic reciprocity law in Z[i] due to Gaufi 
and Dirichlet (note that we may assume a = 1 mod 20^ without loss of generality 
since [i/a] = (— 1)(p -1 )/ 4 = 1). A direct proof goes as follows: assume that m = — 1 
and write a = a + bi. Then [ct/ct] = [2a/<f] = (2a/ p) = 1 since (a/p) = (p/a) = 1. 

□ 



Lemma 3. Let k — Q(y/2) and let tt = 1 mod 20u be a prime in Ok with norm 
tttt = p = 1 mod 8. TTien [7r/7f] = (2/p) 4 . 

Proof. Write 7r = e + f\[2. Then [7r/7f] = (2e/p) = (e/p). On the other hand, 
(2/p)i — [V2/tt], and since \[2 = — e/f mod 7r, we have [\/2/7r] = [~ e// 71 "] = 
(—ef/p) = (e/p) since (//p) = 1: in fact, write / = 2 3 /' for some odd /'; then 
j > 2 and (f/p) = (f'/p) = (p/f) = (e/ff = 1. □ 

Incidentally, the same result holds in Z[-\/— 2]. 

Lemma 4. Let p,q = 1 mod 8 &e primes; then we can choose it, X e Z[\/2] suc/i 
iftat 7V7T = p, A^A = g and 7r = A = 1 mod 2, anc? we Ziaue [7r/A] = [A/71-]. 

Proof. This is well known and follows from the general quadratic reciprocity law 
in number fields with odd class number proved by Hilbert, Hecke, Dorric, Hassc 
and others (sec [9]). In order to convince the reader that its proof is completely 
elementary, we will give it here. 

Write 7T = a + b\/2, X = c + a\/2, and d = Vd' for some odd d! . Then [d/X] = 
(d/q) = (d'/q) = (q)d') = (c 2 -2d 2 /d') = (c/d') 2 = +1. This implies that [tt/A] = 
[d/ A] [ad + bdy/2/X] = [ad — bc/X] = (ad — bc/q) since ds/2 = — c mod A. Similarly, 
we get [X/tt] = (ad — bc/p), hence it is sufficient to show that (ad — bc/pq) = 1. To 
this end, write ad—bc— 2^e and notice that pq = (ac—2bd) 2 — 2(ad—bc) 2 = (ac — 
2bd) 2 mode; this shows that (ad — bc/pq) — (e/pq) — (pq/e) = (ac—2bd/e) 2 = +1 
as desired. □ 



We also note that, for primes splitting in Q((s), i.e. primes p = 1 mod 8, the 
relation 1 + i = V~2($ implies that (^-) — (2/p) 4 (— 1)(p -1 )/ 8 ; in particular we have 
(i±i) = -(2/p) 4 if p ee 9 mod 16, and (2/p) 4 = (-l)^- 1 )/ 8 if (l±i) = +1. Here 
we have written (-^) instead of [^ L ], where a £ Z[i] is an element with norm p; 
this is no problem since [-^] does not depend on the choice of a. 

Lemma 5. Letp = 1 mod 8 be prime; then there exist integers a, b, e, / £ N, b and 
f even, such thatp = a 2 +b 2 = e 2 -2f 2 . Then (±±i) = (±±^) = (^) = (-l) e+f . 
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r i + \/2- 




r / 1 


r/ + ./V2- 




r / 1 


r /-e 1 


U + /V2- 






U + /V2- 






U + A/2~J 



Proof. The first equality follows from (1 + ( 8 ) 2 = (1 + + V2), the equality 
(-^■p) = (^5) is well known and easy to prove, and finally we have 

(^) 

But [f/e + fy/2] = (f/p) = 1: in fact, / = V f fo r some odd integer /' and 
(f/p) = (f'/p) = (Pff) = I- Similarly, [/ - e/e + = (/ - e/p) = (e - //p) 
since (— + 1. Thus 

(~ p~~ ) = = (7=7) = (7 + 7)' 

where we have used that a) p = e 2 — 2/ 2 = — / 2 mod e — / and b) e — / > and 
e - / = e + / mod 4. □ 



3. The Tate-Shafarevich group 

In this section we study the curve E k : y 2 — x(x 2 — 2kx + 2k 2 ), and in particular 
the torsors 

TW(6i) : TV 2 = 61M 4 + 4fcM 2 e 2 - 4fc 2 e 4 , 
TW(6i) : TV 2 = 61M 4 - 2fcM 2 e 2 + 2fc 2 e 4 . 

The following Proposition describing the <fi- and V'-part of the Selmer groups of 
Ek and E k is a special case of a result proved by S. Schmitt in [13]: 

Proposition 6. Suppose that k — pi ■ ■ ■ p t is a product of primes Pi = 1 mod 8 
such that (pi/pj) = +1 for i ^ j and (y^) = +1 for all 1 < j < t; then 

SW(E k /Q) = {hQ x2 : h squarefree, h \ 2k}, 
SW(E k /Q) = {biQ x2 : h squarefree, < 61 | 2k}. 

The case t = 1 was discussed by R. Stroeker & J. Top [15]. Similar results for 
products of primes not necessarily = 1 mod 8 can be found in S. Schmitt [13]. 

Proposition 7. Consider the curve E = E k , where k — p\ ■ ■ ■ pt is a product 
of primes Pi = 1 mod 8, and assume that k = 9 mod 16 if t is odd. Suppose 
moreover that (pi/pj) = +1 for i 7^ j and (^1) = +1 for all p \ k; write pi — 

TTiWi for elements TTi,Tfi £ r L\\[2\ with m = 1 mod 2, and assume in addition 
that [ni/wj] = -1 for i ^ j. Then W(E/Q) = {Q x2 ,-Q x2 } if t is odd, and 
W(E/Q) = {Q x2 ,-Q x2 } or W(E/Q) = {±Q x2 , ±2fcQ x2 } if t is even, the first 
possibility being prohibited by the parity conjecture. 

In particular, we have #m(E/Q)[4>] = = 2 t+1 if t is odd, and 

#UI(E/Q)[4>] > ±#SW(.E/Q) = 2* ift is even, with equality if the parity conjec- 
ture is true. 
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A similar result holds for the isogenous curve: 

Proposition 8. Consider the curve E = Ek, where k = P\---pt * s a product 
of primes pt = 1 mod 8 with (pi/pj) = +1 for i =^ j and (^p) = +1 for all 



p | k; write pi — o~iO{ for elements o~i,o~i € Z[i], and assume in addition that 
[o~i/aj] = —1 fori 7^ j (these symbols do not depend on the choice of the o~i). Then 
W(E/Q) = {Q x2 ,2Q x2 } ift is even, andW(E/Q) C {Q x2 , 2Q x2 , kQ x2 , 2kQ x2 } 
if t is odd (with equality if the parity conjecture is true). 

In particular, we have #W(E/Q)[ip] > ±#SW(E/Q) = 2*" 1 ift is odd, and 
#W.(E/Q)[ip] = ±#SW{E/Q) =2* ift is even, with equality if the parity conjec- 
ture holds. 

Combining these two propositions we find that 

Theorem 9. If the conditions in Propositions 7 and 8 are satisfied, then Ek(Q) 
and -Efc(Q) have rank < 1, with equality if the parity conjecture holds. In this case, 
we also have 

I 2* +1 ift is odd, , ,, TTT ,~ r | 2* 1 ift is odd, 

#m(E/Q)[cf>} = \ 3 and#m(E/QM = \ 3 

I 2 1 ift is even, I 2 C if t is even. 

Proof. The inequality rank Ek(Q) < 1 follows by applying Tate's formula (1). By 
results in [13], the parity conjecture implies that the curves Ek have odd rank 
if < k = 1 mod 8; since we have proved that the rank is at most 1, we must 
have rank Ek(Q) = 1. This in turn implies that the Tate-Shafarevich groups in 
Propositions 7 and 8 have square order. □ 



Remark. Note that standard theorems in analytic number theory imply that the 
conditions for Propositions 7 and 8 can be satisfied simultaneously for infinitely 
many primes: just look at the splitting behaviour of primes in the multiquadratic 
extensions of k = Q((%, \/l + i ) generated by the square roots of the ttj and aj. 

For a proof of Proposition 7 we have to show that most of the torsors 

T<*' (6i) : N 2 = 6iM 4 + 4fcM 2 e 2 + b 2 e i , hb 2 = -4fc 2 , (6) 

do not have solutions 3 . To this end, we give necessary conditions for rational 
solvability that are stronger than solvability in all completions of Q. 

Write k — k\ki and consider the two possibilities b\ = k\ and b\ = 2k\. The 
next two lemmas will give necessary conditions for the solvability of (6). 

Lemma 10. Let k — k\k 2 and b\ = k\ = p\ ■ ■ -p r , and write k\ = K\K\ for some 
K\ e Z[\/2] with K\ = 1 mod 2. If (6) has a solution, then 

• 6i = 1 mod 16; 

• [k\ /tt] = 1 for all 7r | k 2 ; 

3 Prom now on, we only say solution when we actually mean non-trivial primitive integral 
solution. 
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• [ki/ 71 "] = 1 f or a ^ 77 \ K ii where k — ttk^. 

Proof. First observe that there exists some K\ with the desired properties since k\ 
is a product of primes = 1 mod 8. Next «i is determined up to squares of units 
and conjugacy, which together with Lemma 1 implies that the symbols [ki/7t] do 
not depend on the choice of K\. 

Next we first notice that M must be odd: if it were even, e would be odd, and 
this would imply k\ = 3 mod 4. From (M, e) — 1 we deduce that (M, k\) = 1; we 
write (M, k) = (M, k 2 ) = I for some integer I > and put M = lm, k 2 = Iks an d 
iV = k\ln; this gives 

k x n 2 = l 2 m 4 + Ak 2 m 2 e 2 - 4fc 2 e 4 = (lm 2 + 2ek 3 e 2 )(lm 2 + 2efc 3 e 2 ), 

where e = 1 + V% is the fundamental unit in 7L\\f2\. Since any common divisor of 
the two factors divides both their sum and their difference, we see that they are 
coprime m Z[V2}. Thus we find 

lm 2 + 2ek 3 e 2 = k x v 2 \ (7) 

where K\K\ — k\ and vv — n. Reducing this equation modulo some n \ k 2 gives 
[ki/tt] = 1 (in fact, for tt \ I we find [ki/7t] = [2ek 3 /-K]-. but 2 = y/2 is a square, 
[e/n] = (1 + V2/p) = (1 + i/p) = 1 by Lemma 5 and our assumptions, and 
[fc 3 /7r] = (ks/p) = +1 again by our assumptions. The case tt \ k 3 is similar), which 
proves our second claim. 

Now we know that I = m 2 = k 3 = 1 mod 8 in (7) , which gives us either 
K\v 2 = 1 mod 8 or k\v 2 = 1 + 2e = e 2 mod 8 according as e is even od odd. Thus 
ki is congruent to a square modulo 8, that is, K\ = 1, 1 + 4\/2, 3 ± 2\/2 mod 8 (in 
particular, «i = 1 mod 2). From this we deduce that k\ — Nki = 1 mod 16 as 
claimed. 

Subtracting (7) from its conjugate we get 

4V2fc 3 e 2 = mis 2 - kiV 2 . (8) 

Reducing (8) modulo some W | Ki we get (2/p)4 = [v^/tt] = [m/tt] = [k[ /tt] [tt/tt] = 
[K / 1 /7f](2/p) 4 , where «i = tt^. This implies [k'i/tt] = 1- By Lemma 1, [k^/tt] = 
[k^/tt], and our proof is complete. □ 

Lemma 11. Let k = k\k 2 with ki = p\ ■ ■ -p r and bi = 2k\. Write ki = for 
some K\ € Z[\/2] with K\ = 1 mod 2. // (6) has a solution, then 

• [ki/7t] = (2/p)4 for all n \ k 2 with p — Nit; 

• [ki/it] = 1 for TT | K\. 

Proof. Put (M, k) = (M, k 2 ) = I; then N = 2kjn, M = lm, k 2 = lk 3 and 

2km 2 = l 2 m 4 + 2k 2 m 2 e 2 - k 2 e 4 = (lm 2 + ek 3 e 2 )(lm 2 + e'k 3 e 2 ). 

The gcd of the two factors equals \[2 (this follows from / = m = e = fc 3 = l mod 2, 
since these congruences imply that both factors are = 1 + e = 2 + \J~2~ mod 2), 
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hence we get lm 2 + ek^e 2 — \[2k,\v 2 and lm 2 + ek 3 e 2 — — V2kiV 2 for some 
ki € Z[\/2] with Nk\ = k\. Reducing modulo some 7r | p such that p | fc 2 
gives (2/p) 4 [k 1 /tt] = 1. 

Forming the difference as above shows that 2fc 3 e 2 = k\v 2 + K1V 2 ; thus [K1/7F] = 
[ki/7t] = 1 for 7T | K\. □ 



Some Special Cases. Let us now look at the special case where k = pq, where 
p = q = 1 mod 8 are primes such that (^) = (^) = +1 and (|) = +L 
Write Na = p, Nt = q for some a, t <G Z[\/2] with cr = r = 1 mod 2 and 
= (— 1)(™ -1 )/ 8 . We will examine the following eight cases: 



case 


x(p) 


X(q) 


[f] 


case 


x(p) 


X(q) 


[f] 


a) 


-1 


-1 


-1 


e) 


+ 1 


-1 


-1 


b) 


-1 


-1 


+1 


f) 


+ 1 


-1 


+1 


c) 


-1 


+ 1 


-1 


9) 


+ 1 


+1 


-1 


d) 


-1 


+ 1 


+1 


h) 


+ 1 


+1 


+1 



In the last case h) we cannot draw any conclusions about the order of III (E^ / Q) [(f)] , 
since the conditions of Lemmas 10 and 11 are all satisfied. In all other cases, 
however, it turns out that only one equation can have solutions: see the following 
table, which displays which of the equations (6) possibly have solutions according 
to the values of x(p)> x{l) an d [ cr / T ]- 



bi 


conditions 


a) 


6) 


c) 


d) 


e) 


/) 


9) 


±2 


x(p) = x{q) = i 


no 


no 


no 


no 


no 


no 


? 


±p 


£] = +i,x(p) = i 


no 


no 


no 


no 


no 


? 


no 


±2p 


[f] = x(«/),x(p) = i 


no 


no 


no 


no 


? 


no 


no 


±q 


[2]=+l, X (g) = l 


no 


no 


no 


? 


no 


no 


no 


±2q 


[|] = x(p),x(«) = i 


no 


no 


? 


no 


no 


no 


no 


±pq 


X (pq) = 1, (-) = +1 


no 


? 


no 


no 


no 


no 


no 


±2pq 


[f ] = x(p) = 


? 


no 


no 


no 


no 


no 


no 



Here any entry "no" indicates that the corresponding torsor does not have a 
rational point. Observe that U1(E/Q)[cf>] is generated by the classes of 2Q x2 and 
qQ x2 whenever \{q) = ~ 1> assuming that the equations marked with a "?" do 
have solutions in Q as predicted by the parity conjecture. Table 1 gives a few 
numerical solutions of the torsors T^\b\) : b\n 2 = m 4 + 2c\m 2 e 2 — c 2 e 4 , where 
2k = ha. 

The solutions for the torsors T^'(2) and T^\p) in case h) were not found by 
a direct (and very naive) search: rather, we used the smaller solutions found for 
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Tabic 1: 



case 


P 


q 


h 


n 


m 


e 


X 


y 


a) 


41 


409 


2pq 


31 


71 


27 


Ibyubouoo 
729 


z475o7y 174244 
19683 


b) 


41 


569 


pq 


7 


31 


30 


900 


11810U0062y/ 

27000 


c) 


41 


353 


2q 


1927 


205 


17 


29669650 
289 


196899665260 
4913 


d) 


457 


593 


q 


99169 


1371 


29 


1114627113 
841 


47810443842651 
24389 


e) 


353 


41 


2p 


1927 


205 


17 


29669650 
289 


196899665260 
4913 


/) 


113 


41 


p 


41 


41 


7 


189953 
49 


21464689 
343 


9) 


113 


257 


2 


100487 


771 


7 


1188882 
49 


309901908 
343 


h) 


113 


337 


2 


4971761 


3033 


23 


18398178 
529 


60317404452 
12167 








P 


167279 


4047 


242 


1850737617 
58564 


8644333524897 
14172488 








q 


791 


113 


3 


4303153 
9 


10151137927 
27 



&i = q,pq and 2pq to compute them from the group law on torsors that we have 
explained in Section 1. 

Now assume that x(p) = X(q) = x( r ) = — 1 an d consider the following cases: 



case 


[tt/A] 


[*/p] 


[p/A] 


case 


[tt/A] 




[p/A] 


a) 


-1 


-1 


-1 


e) 


+1 


-1 


-1 


b) 


-1 


-1 


+1 


/) 


+1 


-1 


+1 


c) 


-1 


+ 1 


-1 


5) 


+1 


+1 


-1 


d) 


-1 


+ 1 


+1 


ft) 


+1 


+1 


+1 



Then it turns out that all of the torsors T^(6) with b =^ ±1 are non-trivial in 
the cases a), d), f) and g), that is, in these cases (note that they are characterized 
by the condition [tt/A] [A//o][p/7r] = -1) we have # U1(E/Q)[<p] = ±#SW(E/Q). 
In the other cases we find results that are similar to the case k = pq; see Table 2. 



Proof of Proposition 7. Our first observation is that it suffices to consider 
positive values of b\\ since — 1Q X2 e W(E/Q), the torsor T^\b\) possesses a 
solution if and only if T^'(- b\) does. 

Let us first deal with the case where b\ — k\ is a product of r primes pj. If r 
is odd, then there exists a n \ k% unless r = t, hence [ki/tt] = (— l) r = —1, and 
now Lemma 10 says that T^\b\) has no rational solution. If r = t, on the other 
hand, then b\ = k = 9 mod 16, and again Lemma 10 prohibits a rational solution. 
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Table: 2: 





conditions 


6) 


c) 


e) 


h) 


P 


[tt/A] = [w/p] = X (P) = 1 


no 


no 


no 


no 


q 


[A/tt] - [X/p] = X (q) = 1 


no 


no 


no 


no 


r 


[p/n] = [p/X] = X (r) = 1 


no 


no 


no 


no 


pq 


[irX/p] - [A/tt] = X (pq) = 1 


no 


no 


? 


? 


qr 


[Xp/n] = [X/p] = X (qr) = 1 


? 


no 


no 


? 


rp 


[it p/X] = [ir/p] = x(rp) = 1 


no 


? 


no 


? 


pqr 


[Xp/n] = [it p/X] = x(pqr) = 1 


no 


no 


no 


no 


2 


x(p) = x(q) = x(r) = 1 


no 


no 


no 


no 


2p 


X(P) = hx(q) = [A/7r],x(r) = [ir/p] 


no 


no 


no 


no 


2q 


x(q) = hx(r) = [x/p], x {p) = [\/K] 


no 


no 


no 


no 


2r 


X(r) = Lx(p) = [n/p],x(q) = [A/p] 


no 


no 


no 


no 


2pq 


X(r) = [7rA/p],x(p) = x(?) = [A/tt] 


? 


? 


no 


no 


2qr 


x(p) = [Ap/7r],x(<?) = x(r) = [X/p] 


no 


? 


? 


no 


2rp 


x(q) = [ttp/a],x(p) = x(r) = [tt/p] 


? 


no 


? 


no 


2pqr 


X(p) = [Ap/7r],x(g) = [7rp/A],x(0 = [ttA/p] 


no 


no 


no 


no 



If r is even and ^ 0, then there is some 7r | ki, and we have [k^/tt] = (— l) r_1 = 
— 1. Invoking Lemma 10 again, we see that rational solvability implies that r = 0, 
that is, bi = ±1. 

Next consider the case b\ = 2k\ with fci as before. If r is even and ^ t, then 
there is a prime 7r with norm p | ki, and we have x(p) = — 1 an d [^l/ 71 "] = ( — l) r = 
+1. Thus T^\bi) does not have a rational solution for even r by Lemma 11 unless 
t is even and &i = ±2k. If r is odd, let tt be a prime dividing ki. Then solvability 
of our torsor implies that 1 = [ki/tt] = [tt/tt] [k'i/tt] = x(p)(~ l) r_1 = (~ l) r; 
contradiction. 

The Isogenous Curve S/j. Next we study the Tate-Shafarevich group of the 
isogenous curve E. Here, our torsor 

TW(6i) : iV 2 = 6iM 4 - 2kM 2 e 2 + 6 2 e 4 , &!& 2 = 2k 2 , (9) 

factors over the Gaussian integers Z[i]. Since 2Q x2 G W(l?/Q), it is sufficient to 
consider odd values of b\ . 
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So let us take b\ = k\, with k, k\, etc. as in the discussion above. We 
immediately find that M must be odd. Write (M, k) = I. Then M — Im, n — kiln 
and k 2 — lk 3 , and we find 

k in 2 = l 2 m 4 - 2k 2 m 2 e 2 + 2k\e A = {lm 2 - (1 + i)k 3 e 2 )(lm 2 - (1 - i)k 3 e 2 ). 

Since I and m are odd, the factors on the right hand side are coprime, and unique 
factorization in Z[i] gives 

Kl v 2 = lm 2 - (1 + i)k 3 e 2 , (10) 

where K\ € Z[i] has norm k\. If a G Z[i] is a prime with norm p \ k 2 , then equation 
(10) implies [ki/ct] = +1 (note that (-^) = +1 by assumption, and that [ki/ct] 
does not depend on the choice of Ki since [i/cr] = +1 for any prime a with norm 
= 1 mod 8). 

Subtracting (10) from its conjugate and reducing modulo primes a \ ~R\ gives 
[ki/ct] = +1. We have proved 

Lemma 12. I] the torsor (9) has a solution then 

• [ni/a] = +1 for all primes a e Z[i] with norm dividing k 2 ; 

• [ni/a] = +1 for all primes a \ ~R,\, 
where — k\ for some n\ £ Z[i]. 

Now we can prove Proposition 8: assume that b\ — k\ is the product of r primes 
Pj. If r is odd and k 2 ^ 1, then [ki/ct] = (— l) r = — 1, and T^\b\) is not solvable. 
In other words: if r is odd and (bi) has a solution then r — t and b\=k\ = k. 
If r 7^ is even, then there is a a \ K\, and we have [ki/ct} — [ct/ct] (— l) r_1 = — 1 
since [a/a] = +1. Thus T^\bi) is not solvable. 

As a corollary we note that there exist elliptic curves E]~ that are 2-isogenous to 
Eh such that the 2-ranks of Ul(Ek/Q) and UI(Ek/Q) both grow arbitrarily large. 
This is a consequence of the embedding UI(Ek/Q)[4>] — > UI(Ek/Q) discussed in 
Section 5. 



4. More Examples 

In this section we apply the technique explained above to the curves E_k with k 
as in Proposition 6 without giving the technical details. Under the assumptions 
of Proposition 6, the Sclmcr groups for the E-k are 

SW(f?_ fc /Q) = {feiQ x2 : 6i squarefree, h \ k}, 
SW(E- k /Q) = {6iQ x2 : h squarefree, < h \ 2k}. 

For the calculation of the Tate-Shafarevich groups we need the analogs of our 
lemmas; Lemma 10 holds as stated except that we can no longer conclude that 
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k\ = 1 mod 16: in fact, we only get that K\v 2 = 1, 1 — 2e mod 8 (as opposed to 
Ki^ 2 = 1, 1 + 2e mod 8 for positive fc), and 1 — 2e = — 1 — 2V2 is not congruent 
to ±£ 2 mod 8 for ^ e Z[a/2]. In fact it can be shown that the conditions we get 
for K\ are equivalent to [1 + y/2/m] = 1 (see Lemma 5), that is, they are satisfied 
automatically since we have to assume that (1 + \/2/pj) = (1 +i/pj) = 1 in order 
to make our torsors everywhere locally solvable (see Proposition 6). 

On the other hand, we find that Lemma 11 holds, and that in addition we have 
k\ = 1 mod 16. Finally, Lemma 12 goes through unchanged. Using these lemmas, 
the analogs of our results in Section 3 are easily derived: 

Proposition 13. Consider the curve E = E- k where k — Pi ■ ■ ■ Pt is a product 
of primes Pi = 1 mod 8, and assume that k = 9 mod 16 if t is odd. Suppose 
moreover that (pi/pj) = +1 for i ^ j and (^) = +1 for all p \ k; write pi = 

7Tj7Tj for elements iTi,Ti € Z[\/2] with Hi = 1 mod 2, and assume in addition 
that [iTi/irj} = -1 for i ^ j. Then W{E/Q) = {Q x2 ,-Q x2 } if t is even, and 
W(E/Q) = {Q x2 , -Q x2 } or W{E/Q) = {±Q x2 , ±fcQ x2 } if t is odd. 

In particular, we have #UI(E/Q)[4>] = ±#SW{E/Q) = 2* if t is even, and 
#W{E/Q)[<j>] > $#SM(E/Q) = 2*- 1 if t is odd. 

Here is the corresponding result for UI(E /Q)[ip]: 

Proposition 14. Consider the elliptic curve E = E_]~ where k = p\ ■ ■ ■ p t is a 
product of primes pi = 1 mod 8 with (Pi/pj) = +1 for i ^ j and {^ L ) = +1 
for all p | k; write pi = OiOi for elements cri,ai e and assume in addition 

that [<Ji/o-j\ = -1 for i ^ j. Then W(E/Q) = {Q x2 ,2Q x2 } if t is even, and 
W{E/Q) C {Q x2 ,2Q x2 ,/jQ x2 ,2fcQ x2 } if t is odd. 

In particular, we have #UI(E/Q)[ip] > \#S^(E/Q) = 2*" 1 if t is odd, and 
#m(E/Q)[ip} = |#SW(B/Q) = 2* ift is even. 

Again we can combine these results and get 

Theorem 15. // the conditions in Propositions 7 and 8 are satisfied, then £?_fc(Q) 
has rank < 2 if t is odd, and rank if t is even. If the parity conjecture holds and 
t is odd, then either rank E-k(Q) = 2 and the inequalities in Propositions 13 and 
14 are equalities, or rank E- k (Q) = 0, and then W(E_ k /Q) = {Q x2 , -Q x2 } and 
W(E_ k /Q) = {Q x2 ,2Q x2 }. 

Remark. As a conclusion we remark that there is still a lot of work to do: 
although we computed the 2-ranks of UI(E/Q)[4>] and UI(E/Q)[tp] for some E = 
E k and E = E^ k , we do not know yet what the rank of IH(.E/Q)[2] or III(^/Q)[2] 
is. Techniques explained by Birch and Swinnerton-Dyer [2], McGuinness [12] and 
Cremona [6] should suffice for computing the exact 2-rank of III(£ I /Q), and using 
Cassels [5] it should be possible to compute the 4-rank as well, at least for explicitly 
given curves. 

Remark. We also note that our results can of course be used to search for curves 
E k with large rank: one only need consider products k = p\ ■ ■ -p r = 1 mod 16 of 
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primes pi = 1 mod 8 such that the quadratic residue symbols in Propositions 7 
and 8 are +1 instead of —1. 



5. A Conjecture 

The computations made in this paper suggest a conjecture that we are going to 
discuss now. 

Conjecture A. Let E/Q be a modular elliptic curve with a rational 2-torsion 
point ^ O. Then 

rank S W (E/Q) + rank S W {E/Q) = v mod 2, 

where w — {—l) v is the root number, that is, the sign in the functional equation 
of the complete Hasse-Weil L- function £(E, s) of E. 

This conjecture is nowhere near as deep as e.g. the parity conjecture: the 
latter predicts the existence of rational points on certain elliptic curves, whereas 
Conjecture A only compares local data with the sign of the functional equation. 
In fact, since the Selmer groups for the curves Ek are explicitly given in [13], it 
appears to be only a combinatorial problem to verify this conjecture for these 
curves; apart from the curves E±k treated in Proposition 6 and below I checked it 
for all Ek with k — u and k — up, where u E {±1, ±2} and where p is any prime. 
The next thing to do is to prove that Conjecture A is compatible with quadratic 
twists (note we know how the right hand side behaves under quadratic twists). 

Conjecture A predicts that rank III (.E/Q) [0] and rank UI(E/Q)[i/)] are either 
both odd or both even, assuming the parity conjecture. Actually, Conjecture A and 
the parity conjecture are equivalent under the assumption that #III(E/Q)[2] is a 
square. For a proof, consider the commutative exact diagram (see e.g. Cremona 
[6]) 

K ► W(E/Q) ► E(Q)/2E(Q) ► W(E/Q) ► 

K ► S^{E/Q) ► S^(E/Q) ► SW(E/Q) ► C 

o > m(£?/Q)[0] > m(f?/Q)[2] > m{E/Q)[i>] > c 

Here 

K = ker [W(E/Q) — » E(Q)/2E(Q)} ~ ker [S W (E/Q) — » S (2) (E/Q)} 
is a group of order 4/#E(Q)[2], and Cassels proved that 

C = cok [SW(E/Q) — > S W (E/Q)} ~ cok [IH(£yQ)[2] — » UI(E/Q)[^]} 
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has square order. Thus #S^1(E/Q) ■ #S^(E/Q) = #K ■ #S ( ^(E/Q) ■ #C, and 
since #S^(E/Q) = 2 r #E(Q)[2]/#Ul(E/Q)[2] this gives 

#S<*>(£7/0)#SW(£/Q) = 2 r #5/#in( J B/Q)[2], 

that is, 

rank S W (E/Q) + rank S W (E/Q) = r mod 2 

if #III(i?/Q)[2] is a square, and taking this for granted, Conjecture A is equivalent 
to the parity conjecture as claimed. As I recently discovered, Conjecture A was 
proved by Birch & Stephens [1] for the elliptic curves of type y 2 — x 3 + Dx and 
y 2 = x 3 + D. 

The diagram plus the fact that #C is a square also imply that the product 
#m(E/Q)[4>] ■ #III(.E7/Q)[V>] is a square if and only #m(E/Q)[2] is one. Since 
our calculations produced Tate-Shafarevich groups whose orders are squares one is 
tempted to conjecture that this is always true. But as Oisin McGuinness explained 
to me, it does not follow from the existence of the Cassels pairing on UI(E/Q) 
that the orders of Tate-Shafarevich groups corresponding to isogenies of non-square 
degree are perfect squares. The first example for such a behaviour I found were 
the groups UI(E / k)[(f>] and IH(E/k)[ip] for the curve E : y 2 = x 3 - 68x over the 
quadratic number field k = Q(\/— 43), both of order 2 (see [10]). More recently, I 
have found infinitely many examples over Q using elliptic curves with three rational 
points of order 2 (see [11]). 
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